Account privacy notice.

Who provides your account

Diligents Male Grooming and Wellbeing LTD is the operator responsible for this account service. For support, privacy questions or requests about your information, email e1shiv123@gmail.com.

What this service offers

A free customer account lets you verify your email and sign in using an email code or a password. Registration does not activate paid membership, consume a physical card or grant appointment booking. Membership purchases are separate and link to your existing verified account; see the membership privacy notice for payment and fulfilment information.

Information used

We use your first and last name, email address, account identifier, email-verification and password-setup status, and any information you send to account support. Passwords are handled by the authentication service, which stores a password hash; staff-facing account features do not display your password.

Authentication, session, email-delivery and security information is also processed to maintain secure access. This may include request times, IP addresses or derived security identifiers, and verification-challenge records used to limit abuse.

Why this information is used

We use these details to provide the account you request, verify email ownership, maintain sign-in and respond to support requests. Creating an account does not subscribe you to marketing emails.

The account-service basis is performance of the requested service contract. Security and abuse-prevention processing relies on legitimate interests in protecting accounts and the service.

Contact Us messages

Signed-in customers can send a message using Contact Us. We store the message, your account name and email address, the time sent, and the team’s replies so authorised managers can respond. Notifications go to Tom and Fin, and replies are emailed to your account address through our existing Resend email service.

Contact messages are used to handle your enquiry and are retained while needed for support, security and any continuing record-keeping obligation. Please avoid including passwords, card numbers or other information unnecessary for your enquiry.

Authentication, email and hosting

Authentication uses self-hosted Supabase-compatible software. Authentication emails are delivered through Resend SMTP, which processes the recipient address, message content and delivery information. The hosting provider and authorised service operators may process account and technical information to operate and secure the service. Resend describes its processing and transfer safeguards in its Data Processing Addendum.

The account server is hosted by Hostinger in the United Kingdom. Resend processes authentication-email content, recipient addresses and delivery data in the United States. Its Data Processing Addendum includes EU Standard Contractual Clauses with the UK Addendum for UK transfers. If you email the Gmail support inbox, Google processes your sender details and message content under its privacy policy, including processing outside the United Kingdom. You can request information about these safeguards from the support contact above.

If you contact the Gmail support address, Google describes its handling of that correspondence in its privacy policy and its safeguards in its data transfer frameworks, including the UK Extension to the EU-US Data Privacy Framework. You can ask the support contact for more information or a copy of applicable safeguards.

Keeping and deleting information

Account details are retained while needed for the account service, support and security. There is currently no automatic inactive-account deletion period. You can request deletion or ask the operator to review whether the information is still needed; the operator must assess any continuing legal or security need.

Retention decisions consider whether the account is still used or registration is incomplete, whether a support request or security investigation is unresolved, and whether a specific legal obligation requires a record to be kept. Inactive and incomplete accounts are subject to this review rather than a promised automatic deletion date. Records should be deleted or anonymised once no continuing need applies.

Email-verification challenges expire after ten minutes. Expiry prevents use of the code; it does not mean every related authentication, delivery or audit record is immediately deleted. Records and backups require an operator-managed retention review.

The account-email protection tables store hashed recipient/IP and delivery identifiers, fixed outcomes and times—not raw recipients, IP addresses or message bodies. Attempt records older than seven days are cleaned up during subsequent successful reservations, not on a guaranteed deletion timer. Suppression records remain until authorised review; there is no automatic removal of suppression.

Your information and choices

Depending on the circumstances and lawful basis, you can ask for access to your information, correction, deletion, restriction of processing or a portable copy. Contact the operator using the address above to make a request. Identity verification may be needed to protect your account.

Your right to object

You may object to processing based on legitimate interests. Contact the operator to explain your request and circumstances.

Your name, email and password are needed to create the account, and email verification is required before account access. You can choose not to create an account. Registration is not marketing consent.

Questions and complaints

You can raise a concern with the operator and can complain to the UK Information Commissioner’s Office. See the ICO’s complaints guidance.